Skip to content

Pin dependency versions and add release age gate#131

Open
matheus1lva wants to merge 121 commits into
feat/add-metadata-supportfrom
ping-deps-published
Open

Pin dependency versions and add release age gate#131
matheus1lva wants to merge 121 commits into
feat/add-metadata-supportfrom
ping-deps-published

Conversation

@matheus1lva
Copy link
Copy Markdown
Collaborator

@matheus1lva matheus1lva commented May 12, 2026

Summary

  • Pin package dependency specifiers to exact resolved versions.
  • Add Bun publish-age gate with minimumReleaseAge = 604800.
  • Refresh Bun lockfile.

Test plan

  • bun install completed successfully.
  • Verified no mutable dependency range specs remain.

Risk / impact

  • Dependency resolution is stricter; future installs reject package versions published less than 7 days ago.

matheus1lva and others added 30 commits January 29, 2026 15:37
@matheus1lva
Add isStakingEnabled property to vault configurations (#101)
5d3a851 
* Add isStakingEnabled property to vault configurations

* Update 1.json

* Add isStakingDisabled field to VaultMetadata schema (#102)

* Update VaultMetadata.ts

* Make shouldDisableStaking optional in VaultMetadata
@rossgalloway
retire vaults with migration paths
e523e83
@rossgalloway
Merge pull request #103 from yearn/more-retirees
c470521 
retire vaults with migration paths
@rossgalloway
retire and hide katana pre-deposit vaults
6c44a60
@rossgalloway
Merge pull request #104 from yearn/hide-pre-deposit-vaults
550868c 
retire and hide katana pre-deposit vaults
@rossgalloway
remove wsteth vault
4a0d25b
@rossgalloway
Merge pull request #105 from yearn/remove-katana-wsteth-vault
290a1ef 
remove wsteth vault
@actions-user
🤖 Sync vaults, strategies and tokens
80ab0cf
@rossgalloway
disable veYFI staking and 1 silo vault
f718140
@rossgalloway
Merge pull request #106 from yearn/disable-veYFI-staking
1ba3c65 
disable veYFI staking and 1 silo vault
@actions-user
🤖 Sync vaults, strategies and tokens
4bce68a
@rossgalloway
update yCRV factory vault name
8a584d1
@rossgalloway
Merge pull request #107 from yearn/change-ycrv-factory-name
97ae82d 
update yCRV factory vault name
@actions-user
🤖 Sync vaults, strategies and tokens
18dd587
@rossgalloway
Update data in packages/cdn/vaults/10.json
6aee1d1
@rossgalloway
Merge pull request #109 from yearn/rossgalloway-1770824964293
c4de87e 
Retire and hide optimism sUSD curve vault
@actions-user
🤖 Sync vaults, strategies and tokens
b552dc3
@actions-user
🤖 Sync vaults, strategies and tokens
93d4f39
@actions-user
🤖 Sync vaults, strategies and tokens
16617f4
@actions-user
🤖 Sync vaults, strategies and tokens
8f73452
@actions-user
🤖 Sync vaults, strategies and tokens
342eb66
@actions-user
🤖 Sync vaults, strategies and tokens
ba91c43
@actions-user
🤖 Sync vaults, strategies and tokens
1db261d
@actions-user
🤖 Sync vaults, strategies and tokens
5e650f1
@actions-user
🤖 Sync vaults, strategies and tokens
cde2800
@actions-user
🤖 Sync vaults, strategies and tokens
e91da20
@actions-user
🤖 Sync vaults, strategies and tokens
105d0ff
@murderteeth @claude
Handle null registry in vault sync from Kong API (#110)
c9f2a5b 
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
@actions-user
🤖 Sync vaults, strategies and tokens
197506c
@actions-user
🤖 Sync vaults, strategies and tokens
85cfa9d
actions-user and others added 17 commits April 16, 2026 16:18
@actions-user
🤖 Sync vaults, strategies and tokens
5d4fcb6
@actions-user
🤖 Sync vaults, strategies and tokens
ca4907e
@actions-user
🤖 Sync vaults, strategies and tokens
70e6496
@actions-user
🤖 Sync vaults, strategies and tokens
14ff538
@actions-user
🤖 Sync vaults, strategies and tokens
e7622d9
@actions-user
🤖 Sync vaults, strategies and tokens
6dc4d71
@actions-user
🤖 Sync vaults, strategies and tokens
8f8669c
@actions-user
🤖 Sync vaults, strategies and tokens
996af02
@actions-user
🤖 Sync vaults, strategies and tokens
aba53e8
@actions-user
🤖 Sync vaults, strategies and tokens
c1be571
@rossgalloway
Update CMS metadata
781e518
@rossgalloway
Merge pull request #130 from yearn/rossgalloway-1778266807440
2e8ff5f 
Update CMS metadata
@actions-user
🤖 Sync vaults, strategies and tokens
2746bc4
@actions-user
🤖 Sync vaults, strategies and tokens
57a656a
@actions-user
🤖 Sync vaults, strategies and tokens
fd1be7a
@actions-user
🤖 Sync vaults, strategies and tokens
cedc4e1
@matheus1lva
Pin dependency versions and add release age gate
b7be9ee
@vercel
Copy link
Copy Markdown

vercel Bot commented May 12, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
cms Ready Ready Preview, Comment May 13, 2026 10:07pm

Request Review

@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 12, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​types/​bun@​1.3.14 ⏵ 1.2.20100 +11004995 +3100
Updatedreact-router-dom@​7.15.0 ⏵ 7.8.11001006598 +1100
Updated@​tailwindcss/​vite@​4.3.0 ⏵ 4.1.1210010072 -1798100
Updated@​types/​react-dom@​19.2.3 ⏵ 19.1.7100 +11007485100
Updatedvite@​7.3.3 ⏵ 7.1.39675 -2582 +198100
Updated@​types/​react@​19.2.14 ⏵ 19.1.10100 +110080 +188 +1100
Updatedreact-icons@​5.6.0 ⏵ 5.5.01001001008580
Updatedconcurrently@​9.2.1 ⏵ 9.2.09910010083100
Updatedtailwindcss@​4.3.0 ⏵ 4.1.121001008498100
Updatedreact@​19.2.6 ⏵ 19.1.11001008497100
Updatedtailwind-merge@​3.6.0 ⏵ 3.3.11001008696100
Updated@​tanstack/​react-query@​5.100.10 ⏵ 5.85.599 +110088100 +1100
Updatedzustand@​5.0.13 ⏵ 5.0.810010010092100
Updatedreact-dom@​19.2.6 ⏵ 19.1.11001009298100
Updatedreact-infinite-scroll-component@​6.1.1 ⏵ 6.1.099 +110010093 +1100
Updatedframer-motion@​12.38.0 ⏵ 12.23.1295 -1100100 +196 +1100
Updatedzod@​4.4.3 ⏵ 4.0.17100 +110010095100
Updatedviem@​2.48.11 ⏵ 2.34.098 +110010098 +1100
Updatedreact-tooltip@​5.30.1 ⏵ 5.29.19910010099 +2100
Updated@​biomejs/​biome@​2.4.15 ⏵ 2.2.010010010099100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@matheus1lva @rossgalloway @actions-user @murderteeth @dudesahn